This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa
File: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (raw, json)
Hash identifier: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=
Subject key identifier: 8D:7D:DF:C3:B7:89:4B:39:F9:BB:64:17:9C:C1:7B:B7:37:FA:FE:4A
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019C18FD78AC9D4152E0570F3335FA4E0DF0
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa
Signing time: Sun 01 Feb 2026 11:36:30 +0000
ROA not before: Sun 01 Feb 2026 11:36:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64473
IP address blocks: 107.150.174.0/24 maxlen: 24
2a0c:6500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:18:fd:78:ac:9d:41:52:e0:57:0f:33:35:fa:4e:0d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Feb 1 11:36:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d7ddfc3b7894b39f9bb64179cc17bb737fafe4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:8b:d3:10:94:53:b1:27:b3:52:ba:24:0a:
49:7d:96:9b:d7:57:94:e1:8a:82:a5:84:92:f5:29:
48:df:d1:8b:8d:09:a7:3b:bf:16:ae:21:56:8e:b6:
62:f3:3a:f5:cd:43:8b:c2:82:d8:3d:ed:10:10:5e:
77:dc:d1:5d:2b:23:8b:75:56:d0:b4:97:b2:fb:e2:
8f:dc:2b:5d:22:28:b4:7f:8c:a0:c4:f8:1d:56:9c:
67:f3:0e:68:a0:fe:fc:27:76:66:4b:6f:fd:76:ef:
ed:87:e2:e5:35:f5:19:00:cc:1f:99:62:7c:9b:a4:
07:34:26:3d:63:25:00:ad:f3:d1:6d:74:65:c0:e9:
66:92:d7:e5:f2:e0:9b:c8:21:6f:f5:6c:8e:28:d5:
10:15:e9:0c:e6:fb:3e:22:4f:7d:d1:87:ef:23:cf:
a2:8f:5a:be:f8:a2:fa:86:90:9a:d4:71:f0:2f:b5:
77:d3:69:67:b3:d0:c0:71:e5:2a:5c:5b:e6:79:78:
5f:3b:13:38:de:be:1e:aa:41:1e:8f:f8:77:81:a6:
cb:9e:55:76:f7:4d:ef:66:9e:1f:d4:28:a8:bb:91:
15:92:e2:da:1b:4b:87:82:1a:93:53:a3:56:82:0f:
28:1a:d6:2f:4d:b9:69:a9:84:0a:35:00:51:cd:d0:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:DF:C3:B7:89:4B:39:F9:BB:64:17:9C:C1:7B:B7:37:FA:FE:4A
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.174.0/24
IPv6:
2a0c:6500::/48
Signature Algorithm: sha256WithRSAEncryption
a6:92:c8:48:2d:a9:01:3b:9f:6f:86:37:ab:59:e4:ae:6d:52:
e9:1e:5c:f4:d4:09:49:c3:25:19:dc:e4:df:da:ed:b5:63:52:
c5:95:47:76:39:5c:18:86:6f:b6:89:8c:b7:71:6d:cd:81:a2:
14:e4:4c:0d:9b:91:04:67:cf:31:f2:d4:a1:b3:bb:cb:42:a6:
27:0c:f7:c4:00:ec:cc:29:54:61:72:33:f7:90:b3:9f:e9:68:
04:ab:2a:06:2a:a7:4b:0d:c2:49:c5:0a:19:61:e9:71:c5:f9:
13:98:33:7f:84:b3:4a:8f:4a:23:ba:5a:44:7f:07:37:29:32:
6e:e1:6e:20:43:11:cb:e7:b0:c8:f1:ca:4e:84:6e:ed:bf:b4:
90:e8:c3:aa:12:d5:c9:fa:61:3c:52:82:56:2e:b3:c7:db:4c:
36:c5:84:f3:1d:e0:06:d6:54:73:c5:59:8e:1a:78:b4:d5:12:
87:73:3e:fa:a7:73:30:d3:ba:cd:d5:d3:21:7a:e4:23:9d:26:
f4:4c:07:82:e7:25:ab:f8:d0:3a:9e:7f:86:6f:8c:09:b8:1c:
80:87:86:cd:48:7d:9f:ae:0e:7a:a4:41:9e:90:e0:72:60:14:
5e:07:71:ea:cd:46:1a:5f:80:d9:54:04:e4:92:97:cf:46:e3:
f1:98:a8:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZwY/XisnUFS4FcPMzX6Tg3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmQxZGM2Y2FhNDFkM2JlZmZlOGQxZGEyNjcxYTUwZTdm
NzlhMzAwHhcNMjYwMjAxMTEzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdkZGZjM2I3ODk0YjM5ZjliYjY0MTc5Y2MxN2JiNzM3ZmFmZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CCL0xCUU7Ens1K6JApJfZab11eU
4YqCpYSS9SlI39GLjQmnO78WriFWjrZi8zr1zUOLwoLYPe0QEF533NFdKyOLdVbQ
tJey++KP3CtdIii0f4ygxPgdVpxn8w5ooP78J3ZmS2/9du/th+LlNfUZAMwfmWJ8
m6QHNCY9YyUArfPRbXRlwOlmktfl8uCbyCFv9WyOKNUQFekM5vs+Ik990YfvI8+i
j1q++KL6hpCa1HHwL7V302lns9DAceUqXFvmeXhfOxM43r4eqkEej/h3gabLnlV2
903vZp4f1Ciou5EVkuLaG0uHghqTU6NWgg8oGtYvTblpqYQKNQBRzdCzbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI1938O3iUs5+btkF5zBe7c3+v5KMB8GA1UdIwQY
MBaAFJ5tHcbKpB077/6NHaJnGlDn95owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUt
ODNmOWE4ZDFkNGQ2LzEvalgzZnc3ZUpTem41dTJRWG5NRjd0emY2X2tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUtODNmOWE4ZDFkNGQ2
LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAa5auMA8E
AgACMAkDBwAqDGUAAAAwDQYJKoZIhvcNAQELBQADggEBAKaSyEgtqQE7n2+GN6tZ
5K5tUukeXPTUCUnDJRnc5N/a7bVjUsWVR3Y5XBiGb7aJjLdxbc2BohTkTA2bkQRn
zzHy1KGzu8tCpicM98QA7MwpVGFyM/eQs5/paASrKgYqp0sNwknFChlh6XHF+ROY
M3+Es0qPSiO6WkR/BzcpMm7hbiBDEcvnsMjxyk6Ebu2/tJDow6oS1cn6YTxSglYu
s8fbTDbFhPMd4AbWVHPFWY4aeLTVEodzPvqnczDTus3V0yF65COdJvRMB4LnJav4
0Dqef4ZvjAm4HICHhs1IfZ+uDnqkQZ6Q4HJgFF4HcerNRhpfgNlUBOSSl89G4/GY
qN4=
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:05 2026 by rpki-client